Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/323830343a333639303a3a2f33322d3438203d3e20323636333536.roa
File:                     323830343a333639303a3a2f33322d3438203d3e20323636333536.roa (raw, json)
Hash identifier:          WKgshAZaAUOCGlt5379dTi5ULvFGIdCvHCUVGHID5dM=
Subject key identifier:   22:E2:03:2C:AF:B1:AF:5C:22:73:92:A1:EA:56:77:84:3C:1E:C9:B6
Certificate issuer:       /CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
Certificate serial:       33099823ED6704005FF9B5A9AC6F29837A0D6D2B
Authority key identifier: D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/323830343a333639303a3a2f33322d3438203d3e20323636333536.roa
Signing time:             Fri 03 Nov 2023 12:47:42 +0000
ROA not before:           Fri 03 Nov 2023 12:42:42 +0000
ROA not after:            Fri 01 Nov 2024 12:47:42 +0000
asID:                     266356
IP address blocks:        2804:3690::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:09:98:23:ed:67:04:00:5f:f9:b5:a9:ac:6f:29:83:7a:0d:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
        Validity
            Not Before: Nov  3 12:42:42 2023 GMT
            Not After : Nov  1 12:47:42 2024 GMT
        Subject: CN=22E2032CAFB1AF5C227392A1EA5677843C1EC9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:c1:14:e3:0b:a1:9e:9f:37:27:86:bf:70:
                    1c:91:87:12:cf:7a:e5:ea:3b:32:18:e6:77:dc:9d:
                    62:7a:de:7a:88:f2:ac:b1:81:e7:4e:0f:4a:0f:da:
                    61:89:82:46:99:a8:36:21:26:cc:2a:11:c1:73:8b:
                    c4:6c:52:e7:4c:45:52:e8:3f:b5:ea:41:03:f0:53:
                    a7:30:63:ce:73:d9:09:e9:59:7e:29:28:d4:47:b6:
                    c2:95:29:53:16:11:b1:22:a3:10:de:5d:df:e6:69:
                    be:44:77:2d:ce:9e:1f:7d:18:e5:74:4f:07:40:8a:
                    db:92:c5:22:09:ca:72:df:d4:94:b7:fc:97:43:5a:
                    49:0a:71:12:99:07:35:01:93:e8:d5:3e:0f:3b:4a:
                    6e:60:7b:d9:68:ea:81:a5:7f:f5:9e:86:c2:f5:a5:
                    0b:87:1b:9b:12:4e:f4:64:d0:45:ce:a4:86:5d:81:
                    ee:9b:e4:a8:1d:1b:0e:9b:0f:1c:aa:2a:70:c7:03:
                    33:f9:50:b6:58:71:be:ae:57:4e:de:57:7f:0b:8e:
                    1b:12:62:ba:48:fd:bb:44:bf:d9:f6:ba:93:f3:52:
                    56:15:e8:a0:5c:cf:85:2b:c9:58:93:ee:df:e9:60:
                    c2:fc:04:ad:70:f9:c4:2a:9b:62:7d:f8:ce:21:f1:
                    2b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:03:2C:AF:B1:AF:5C:22:73:92:A1:EA:56:77:84:3C:1E:C9:B6
            X509v3 Authority Key Identifier:
                keyid:D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/323830343a333639303a3a2f33322d3438203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3690::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:56:dd:29:65:d9:c9:e5:38:a2:d1:38:64:47:33:f3:b1:a4:
         f9:df:80:8c:c4:6d:9c:2e:ea:28:67:27:43:c8:02:62:ef:08:
         ea:d1:f6:4c:79:15:cc:8a:fc:46:7f:03:7e:7d:c1:8c:cf:5a:
         fc:5c:e8:27:63:dc:1c:58:31:4b:b0:2d:d5:79:a7:aa:bf:be:
         ce:a2:6a:b5:04:4e:6c:9e:09:8a:b7:bf:05:07:92:00:b3:ff:
         d9:c5:51:02:a2:09:e1:a6:12:52:23:a5:20:01:2a:07:ca:df:
         de:bc:84:2b:56:cb:ea:4e:14:bb:35:6f:66:38:4c:f2:bc:54:
         f7:e0:7c:ac:f5:90:7b:e7:20:0b:61:68:ea:75:18:35:00:ba:
         31:1a:27:68:cb:bb:33:94:b9:39:83:f0:1b:2f:2b:66:fc:b5:
         83:c0:b7:62:cc:e3:0f:0c:5a:c5:2e:9a:aa:6b:54:e8:eb:43:
         53:43:c3:19:97:03:eb:4e:83:50:c1:e4:69:8e:a9:c0:ea:91:
         94:15:6b:2e:23:fe:ce:f5:a6:f4:8d:f4:53:ed:01:1d:9f:ea:
         84:5f:2f:d0:8f:fe:05:1c:e3:a3:fb:56:8a:f4:3e:2b:95:90:
         96:78:c8:80:df:20:f5:d2:d6:3d:dd:ad:f6:2e:53:11:f9:a2:
         94:06:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org